753670ff8f1d9408776bbdd3b32d3c5a44bb13d58e51e71deee738c4cc42bbfc

Analysis

max time kernel
150s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/07/2026, 01:46

Target
2026-07-22_71e6d8a38e1ec7b528f9c9a97cdcba25_cobalt-strike_cryptbot_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 80.6MB
Sample260723-b68cmayhpg
SHA256 753670ff8f1d9408776bbdd3b32d3c5a44bb13d58e51e71deee738c4cc42bbfc
MD5 71e6d8a38e1ec7b528f9c9a97cdcba25
SHA1 2de0af7925b594b57da945ef0bf47f5639583b00
SHA512 d19f07676e0c433cfcbbaa0167bb4806320b411579e65972f40e0471c9cea1a8a91910cadca72e000ab98918993ab3ae4b51ba0b4d60f27516b4f54fbcde8277
SSDEEP 1572864:T6S/jL5yXefbMz9CNKq1dynStm7kOTqWKy0xLaQRwFtFO95KaJv2R:G+jLEefY9Wzdaem7FTHKy0xfwFXtDR
TLSH
T16E083341FAA64DC7F50AF2785476CA0C96373435C78AD28B369E838A2F5B3A09D3D744
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5080	2026-07-22_71e6d8a38e1ec7b528f9c9a97cdcba25_cobalt-strike_cryptbot_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
5080	2026-07-22_71e6d8a38e1ec7b528f9c9a97cdcba25_cobalt-strike_cryptbot_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-22_71e6d8a38e1ec7b528f9c9a97cdcba25_cobalt-strike_cryptbot_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-22_71e6d8a38e1ec7b528f9c9a97cdcba25_cobalt-strike_cryptbot_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5080